> Create a self-signed root cert, push it to all machines via whatever administrative update tool you use, or just walk around a small office with a flash drive

> Create a self-signed root cert, push it to all machines via whatever administrative update tool you use, or just walk around a small office with a flash drive. Congratulations, you've just installed a massive security risk in an organisation that barely understands the word certificate